Secure login server x.509 certificate for Cloud applications

[Former Member]

Hi All,

We want to implement SSO in our landscape which has huge SAP landscape and in future couple of cloud applications will be added.

We were planning to utilize SAP NW SSO 2.0 product for this.

I know that SAML will support single sign on of cloud application.

Is it possible to implement SSO for cloud applications using Secure login server and it's x.509 certificates ?

Regards

Siva.

[donka_dimitrova]

Hello Siva,

You can use the SAP Single Sign-On product (license required) for such scenarios. Cloud applications usually support mainly SAML technology but if you decide to implement SSO based on X.509 client certificates for your on premise SAP systems you can also install our SAML Identity Provider (IDP) and to use the X.509 certificate for the authentication to the SAML IDP. This way your users will get the required SAML assertion for the respective Cloud applications.

If you are running a Microsoft Domain, you can implement "One Login". You can use the Kerberos tokens issued for the user by the Microsoft Domain in the morning for authentication to the Secure Login Server (X.509 issuer) or the SAML IDP and this way your users will have SSO to on premise and cloud applications.

I can organize a presentation of the  AP Single Sign-On product capabilities for you and your team and we can discuss the implementation variants. If you are interested in such session just sent me a message on donka.dimitrova at sap.com.

Regards,

Donka Dimitrova